Strange behavior on my network... Has my home system been compromised?  A disgruntled employee (sysAdmin) could have full access...worried...

I have been experiencing a lot of strange behavior on my home network ever since a disgruntled employee was let go.  He was a server admin and had root access to my home network - where I run my business.  I am getting a ton of span now, my websites were all infected with xss hacks, and many of my accounts are blacklisted.  I did a clean install and DoD erase pass on my hardware, but I still see a lot of errors and my hosts file and VMs look very odd.  not to mention the extremely odd loops in my ifconfig...  Any help? 
Here is an output of 'ifconfig'
(FYI, I am a software dev, so feel free to speak the jargon and ask for specific things)
(I hid any identifying info with either xx or my:ma:ca:dd:re:ss or something like that)
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
    options=3<RXCSUM,TXCSUM>
    inet6 ::1 prefixlen 128
    inet 127.0.0.1 netmask 0xff000000
    inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
    nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
    ether th:is:ad:dr:es:s1
    inet6 fxxx::xx2a:xxff:fxxx:fxxx%en0 prefixlen 64 scopeid 0x4
    inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.xx.xx.xxx
    nd6 options=1<PERFORMNUD>
    media: autoselect (1000baseT <full-duplex,flow-control,energy-efficient-ethernet>)
    status: active
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    ether th:is:ad:dr:es:n1
    inet6 fe80::e2f8:47ff:fe29:6ec2%en1 prefixlen 64 scopeid 0x5
    inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.xx.xx.xxx
    nd6 options=1<PERFORMNUD>
    media: autoselect
    status: active
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
    lladdr 70:cd:xx:ff:fe:xx:xx:xx
    nd6 options=1<PERFORMNUD>
    media: autoselect <full-duplex>
    status: inactive
en2: flags=8922<BROADCAST,SMART,PROMISC,SIMPLEX,MULTICAST> mtu 1500
    options=60<TSO4,TSO6>
    ether my:wi:fi:ma:ca:dd
    media: autoselect <full-duplex>
    status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    options=63<RXCSUM,TXCSUM,TSO4,TSO6>
    ether th:is:ad:dr:es:mtu
    Configuration:
        id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
        maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
        root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
        ipfilter disabled flags 0x2
    nd6 options=1<PERFORMNUD>
    media: <unknown type>
    status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
    ether th:is:ad:dr:es:p2p0
    media: autoselect
    status: inactive
vmnet1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    ether 00:50:56:c0:00:01
    inet 192.168.48.1 netmask 0xffffff00 broadcast 192.168.48.255
vmnet8: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    ether 00:50:56:c0:00:08
    inet 192.168.219.1 netmask 0xffffff00 broadcast 192.168.219.255
ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1396
    inet my.ded.vpn.xx --> 192.xxx.xxx.xxx netmask 0xffffff00
nooooooo:~ cearnhart$ ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
    options=3<RXCSUM,TXCSUM>
    inet6 ::1 prefixlen 128
    inet 127.0.0.1 netmask 0xff000000
    inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
    nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
    ether th:is:ad:dr:es:s1
    inet6 xxx::xxxx:xxff:xxxx:fxx2%en0 prefixlen 64 scopeid 0x4
    inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.x.x.xxx
    nd6 options=1<PERFORMNUD>
    media: autoselect (1000baseT <full-duplex,flow-control,energy-efficient-ethernet>)
    status: active
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    ether th:is:ad:dr:es:n1
    inet6 fxxx::xxf8:47ff:fxx:6xx%en1 prefixlen 64 scopeid 0x5
    inet 10.x.x.x netmask 0xffffff00 broadcast 10.x.x.xxx
    nd6 options=1<PERFORMNUD>
    media: autoselect
    status: active
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
    lladdr xx:xx:xx:ff:fe:xx:5f:xx
    nd6 options=1<PERFORMNUD>
    media: autoselect <full-duplex>
    status: inactive
en2: flags=8922<BROADCAST,SMART,PROMISC,SIMPLEX,MULTICAST> mtu 1500
    options=60<TSO4,TSO6>
    ether xx:00:1e:xx:xx:xx
    media: autoselect <full-duplex>
    status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    options=63<RXCSUM,TXCSUM,TSO4,TSO6>
    ether th:is:ad:dr:es:mtu
    Configuration:
        id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
        maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
        root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
        ipfilter disabled flags 0x2
    nd6 options=1<PERFORMNUD>
    media: <unknown type>
    status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
    ether th:is:ad:dr:es:p2p0
    media: autoselect
    status: inactive
vmnet1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    ether 00:50:56:c0:00:01
    inet 192.168.48.1 netmask 0xffffff00 broadcast 192.168.48.255
vmnet8: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
    ether 00:50:56:c0:00:08
    inet 192.168.219.1 netmask 0xffffff00 broadcast 192.168.219.255

If you know or suspect that a hostile intruder has either had physical access to it, or has been able to log in remotely, then there are some steps you should take to make sure that the computer is safe to use.
First, depending on the circumstances, computer tampering may be a crime, a civil wrong, or both. If there's any chance that the matter will be the subject of legal action, then you should do nothing at all without consulting a lawyer or the police. The computer would be the principal evidence in such a case, and you don't want to contaminate that evidence.
Running any kind of "anti-virus" software is pointless. If I broke into a system and wanted to leave a back door, I could do it in a way that would be undetectable by those means—and I don't pretend to any special skill as a hacker. You have to assume that any intruder can do the same. Commercial keylogging software—which has legitimate as well as illegitimate uses—won't be recognized as malware, because it's not malware.
The only way you can be sure that the computer is not compromised is to erase at least the startup volume and restore it to something like the status quo ante. The easiest approach is to recover the entire system from a backup that predates the attack. Obviously, that's only practical if you know when the attack took place, and it was recent, and you have such a backup. You will lose all changes to data, such as email, that were made after the time of the snapshot. Some of those changes can be restored from a later backup.
If you don't know when the attack happened, or if it was too long ago for a complete rollback to be feasible, then you should erase and install OS X. If you don't already have at least two complete, independent backups of all data, then you must make them first. One backup is not enough to be safe.
When you restart after the installation, you'll be prompted to go through the initial setup process for a new computer. That’s when you transfer the data from a backup in Setup Assistant.
Select only users in the Setup Assistant dialog—not Applications, Other files and folders, or Computer & Network Settings. Don't transfer the Guest account, if it was enabled.
Reinstall third-party software from original media or fresh downloads—not from a backup, which may be contaminated.
Unless you were the target of an improbably sophisticated attack, this procedure will leave you with a clean system. If you have reason to think that you were the target of a sophisticated attack, then you need expert help.
That being done, change all Internet passwords and check all financial accounts for unauthorized transactions. Do this  after the system has been secured, not before.

Similar Messages

  • Wifi icon and network and sharing center show no connection but I have full access

    The wifi icon has an orange "ball" on it. Left click and it shows I am connected to my wifi. But at the top of the window is says "not connected."  Go to Network and sharing center and it shows a red x going to the router. 
    All this and I have full access to the internet.  What is going on?  How to fix? 
    Duane G. Leet, PhD 45 years experience in technology

    Hi，
    For this issue, first I suggest you keep the latest driver for the network adapter, and disable other network adapters except the one you're using now, check if this issue persists.
    or you can delete this wifi profile in manage wireless networks, then manually reconnect to this wifi, check if it make any difference.
    I also would like to share this link with you
    The Network Connection Status Icon
    http://blogs.technet.com/b/networking/archive/2012/12/20/the-network-connection-status-icon.aspx
    Yolanda Zhu
    TechNet Community Support

  • Strange behavior when Popup LOVs has read-only condition and Bug Report

    Hi,
    I observed an inconsistent behavior of Popup LOVs when the read-only condition is true. In that case the defined lov query is used to map the internal value of the page item to the display value defined in the lov query.
    What is the reason for this behavior? Because if the Popup LOV is in "edit mode" the page item value is just displayed without looking up the display value. The display value is just used for the popup lov. Mapping the value is normally a behavior of the popup key lov.
    -> The result is that different values are displayed if the page item is in edit or read-only mode. That's not really the behavior someone would expect.
    BTW, there seems to be a bug with "Display Extra Values" set to "Yes" in the case read-only is true. If the lookup doesn't return a value it just displays [ ], but because the property is set to yes it should display the value. The Popup Key Lov has the same bug.
    Thanks for bringing some light into that behavior
    Patrick
    Oracle APEX Essentials: http://essentials.oracleapex.info/
    My Blog, APEX Builder Plugin, ApexLib Framework: http://www.oracleapex.info/

    Patrick,
    I've added your comments to a task already in our queue to examine all item types for correct behavior in read-only mode. I've noticed the quirks with display extra values also.
    By the way, still interested in your thoughts re: Re: Bug Report: Images broke when using get_blob_file_src and not authentic .
    Scott

  • Has my iPhone 5 been compromised?

    I keep getting texts from Canadian numbers saying "Hydro2 has logged onto the network" ... It's a random (587) number every time and happens often. Any thoughts?

    If you're getting text messages, it's usually not your phone that's compromised but the phone number.
    Try blocking the messages:
    http://support.apple.com/kb/ht5845

  • After home sharing my pc and my ipad2 I still have no access to my songs from my iTunes on pc even though I signed in with the same ID on my pad2.what is the operator error I make?

    I tried to find it out myself but even though apple is quite idiot proof I still manage my way around it.:-)
    Found my apple IDs, my passwords, my voucher I thought I'd lost but to get my iTunes songs I have on my old pc onto my ipad2 I need a degree!
    It seems that even though I clicked on home sharing and connected the device to the pc that nothing gets transferred.:-(
    It gets better, I actually bought a MacBook air but my pc doesn't recognise the hardrive which I'd like to use for important files to transfer to my mac.
    Now I have a knackered pc a pretty but empty mac no music on it but probably one click away!
    Oh, did I mention that I have a kindle device but don't seem to be able to connect it to my iPad?
    I know latest now you are laughing and suggesting to get rid of my technology and be better of living without any electricity to prevent me from injuries.
    That's nice of you but doesn't help me as stubborn as I am.
    I guess if you won't help me I will find out eventually!
    But if you dare, please try and help me!:-)

    - Restore from backup. See:                                 
      iOS: How to back up

  • WAAS strange behavior

    Hi
    I have a very strange problem on the network since I put WAAS.
    The architecture is as following :
    Central site with access to remote sites else via MPLS operator network (provinding its routers) else via IPSec VPN with firewall.
    Recently it was decided to try the WAAS solution to enhance performance on a particular remote site.
    So I have one WAVE274 as manager on the central site, one WAVE474 (inline) between the network and the operator router leading to approximatively 100 remote sites, a WAVE474 on one remote site only (inline too).
    All was properly functionning : Optimization and so on between the 2 WAVE474, no action for other remote sites (of course).
    My problem is that access to one particular URL (really needed) from all the remote sites passing through the central WAAS box is not available anymore !!! Access to that URL is OK from all remote VPN sites and from the central site.
    When putting off the WAVE474 of the central site, the URL access is regained.
    I can't understand. I thought that only the traffic between 2 WAAS peers was optimized (modified) and that trafic passing through only one WAAS box was not modified (the central WAVE acting in that case as a wire).
    Any idea ?

    Hi
    I have some new information, but the problem is still there ...
    I tested again the problematic web site when getting through only one WAVE :
    1/ My PC -> central WAVE -> LAN -> FW -> Internet
    --> OK
    2/ Remote Site -> ISP remote router -> ISP backbone -> ISP central router -> central WAVE -> LAN -> FW -> Internet
    --> Not OK no access to the web site
    3/ Remote Site -> Remote WAVE -> ISP remote router -> ISP backbone -> ISP central router -> LAN -> FW -> Internet
    --> OK
    I upgraded the 3 WAVE (central manager, remote + central) to version 4.1.3.55, but it was not better.
    Any new idea ?
    Could anyone with WAAS test the access to this web site, please ?
    The URL is :
    http://www.net-entreprises.fr
    If this particular site has problem with TCP options, could we configure the WAVE not to put option just for that destination, assuming that access to other sites is OK ?
    Thanks in advance

  • LV7.1 Strange behavior with Automatic Error Handling occuring when it shouldn't [LV 7.1 Pro on WinXP for Tablet PC's]

    [LV 7.1 Pro on WinXP for Tablet PC's]
    I recently let a rather large LV app of mine run in the development environment while I was out for a couple of days. Upon returning I found that the app had hung for ~22 hours waiting for an answer to an Automatic Error Handling (AEH) dialog proclaiming an Error 7 in New File without any indication of the VI hierarchy that called New File.  I set about ensuring that AEH dialogs would not pop up and have not been able to discover how I could have possibly received one in the first place.
    Subsequent investigation revealed:
    Neither AEH option in Options>Block Diagrams were checked.
    Network problems had occurred around the time that the app had hung.  All file paths are network paths when running in the development environment, so the cause of the error was most likely valid, even if the AEH dialog appearance wasn't.
    My app has only one instance where the New File primitive is used by me. That subVI and all others above it in the hierarchy DO NOT have the AEH property enabled.  The error out cluster of New File in my subvi is wired.
    My app has three instances where New File is called from a vi.lib vi (Open/Create/Replace File.vi, Open Config Data.vi, and Prompt Web Browser Path.vi), none of which have the AEH property enabled.  Nor does any of their calling VI's.  All three instances also have their error out cluster wired.
    A utility to examine the AEH property of all VI's (with all top level and dynamic VI's loaded) in memory reported that only 1 of 308 vi's ( RGT Does File Exists.vi from the Report Generation Toolkit) had that property true.  That vi has no subVI's other than the File/Directory Info primitive and no calling VI's in common with any of the vi's that call New File, except a top level VI.
    As long as 'Enable automatic error handling dialogs' remains unselected in options>block diagram, I am unable to get an AEH dialog for either the New File or File/Directory Info primitives in a test VI with AEH property enabled and their error out clusters unwired no matter what invalid path I pass to the functions.  As soon as the options>block diagram>Enable AEH dialogs' is selected, both primitives fire AEH dialogs with no error out wired and don't when wired. i.e. works as advertised.
    In other words I can find no reason why I should have gotten the problem AEH dialog...
    I cannot afford for this app to hang because of a network problem, other portions of the app that were running concurrently correctly handled the error and, had the AEH dialog not appeared, the app would have made corrections or shutdown in an orderly fashion.
    Any ideas?

    Very good.
    Write Characters to File.vi>Open/Create/Replace File.vi>New File
    New File throws the error.  Open/Create/Replace strips the hierarchy from the source of the error.  Write Characters passes it to the General Error Handler.  I never looked above O/C/R file in the hierarchy except for enable automatic error handling property.  The tip-off should have been to realize that O/C/R file was stripping the hierarchy from the error and look above that. 
    The real irony is that Write Characters was being used to log error cluster data to an error log file...
    Save as... Copy without updating... the OEM 'Write Characters to File' is gone from this app.
    Thanx (a bunch)

  • Our home network has multiple devices connected by iCloud. Having problem with Calendar. On one iMac, all the events are duplicated. How can I correct that problem? Under the Calendar accounts, I had my Apple id listed and also just iCloud.

    Our home network has multiple devices connected by iCloud: 2 iMacs, 2 iPhone 4s, 1 MacPro Laptop, and 1 iPad 2.  When using Calendar, all the events were
    duplicated on my husbands iMac.  On his computer, under Calendar accounts, I had included iCloud and also my iCloud ID.  I thought that because I had two accounts listed that were connected to iCloud, that might be the cause of the duplication.  When I deleted ithe calendars from one of the accounts, it resulted
    in deleting all of the events on all of our network devices!
    I have since entered some new events into Calendar from my iMac and from my iPhone.  These appear correctly on all devices except my husband's iMac where they are again all duplicated.
    I have two questions: 1)  How can I eliminate the duplicated events on my husband's computer and 2) How do I retrieve the old wiped out Calendar events from
    Time Capsule.  I don't know how to find Calendar in the Time Capsule.  If I find the Calendar information in Time Capsule, how do I transfer it to my current Calendars?
    I was obtaining phone help from one of the Apple techs at Apple Support, but our call was disconnected part way through.  Didn't know how to reconnect with the tech.
    Thanks for any help.

    The warranty entitles you to complimentary phone support for the first 90 days of ownership.

  • My home network has an Airport Extreme w/Time Capsule as the base and then an Airport Express and a second Airport Extreme to reach different areas of the house.  Is there a way to use the second Airport Extreme for file storage on this network?

    My home network has an Airport Extreme w/Time Capsule as the base and then an Airport Express and a second Airport Extreme to reach different areas of the house.  Is there a way to use the second Airport Extreme for file storage on this network?  Network is administered through an iMac running OS X Yosemite 10.10.2.  Ideally, would like for the second Airport Extreme hard drive to appear on the list of devices in the Finder window.

    Ok.. gottcha
    The problem is network wise.. Yosemite is about equal to tin cans and string.. pathetic.
    Here is my usual set of instructions to get anything working on Yosemite.
    The best way to fix problems is a full factory reset of all the AE in the network.
    Factory reset universal
    Power off the AE.. ie pull the power cord or power off at the wall.. wait 10sec.. hold in the reset button.. be gentle.. power on again still holding in reset.. and keep holding it in for another 10sec. You may need some help as it is hard to both hold in reset and apply power. It will show success by rapidly blinking the front led. Release the reset.. and wait a couple of min for the AE to reset and come back with factory settings. If the front LED doesn’t blink rapidly you missed it and simply try again. The reset is fairly fragile in these.. press it so you feel it just click and no more.. I have seen people bend the lever or even break it. I use a toothpick as tool.
    Then redo the setup from the computer with Yosemite.
    1. Use very short names.. NOT APPLE RECOMMENDED names. No spaces and pure alphanumerics.
    eg AEgen5 and AEwifi for basestation and wireless respectively.
    Even better if the issue is more wireless use AE24ghz and AE5ghz with fixed channels as this also seems to help stop the nonsense.
    2. Use all passwords that also comply but can be a bit longer. ie 8-20 characters mixed case and numbers.. no non-alphanumerics.
    3. Ensure the AE always takes the same IP address.. this is not a problem for AE which is router.. it is a problem for AE which is bridged.. you will need to set static IP in the main router by dhcp reservations or use static IP in the AE which is tricky.
    4. Check your share name on the computer is not changing.. make sure it also complies with the above.. short no spaces and pure alphanumeric..
    5. Make sure IPv6 is set to link-local only in the computer. For example wireless open the network preferences, wireless and advanced / TCP/IP.. and fix the IPv6. to link-local only.
    6. Now mount the disk of the second AE in finder... manually.
    Use Go, Connect to Server and type in the AE ip address.
    SMB://10.0.1.2
    Where you will replace that address with the actual address. The network resource should be discovered and then it will request the password.. type that in and make sure you tick to save it in your keychain.
    There is a lot more jiggery pokery you can try but the above is a good start.. if you find it still unreliable.. don't be surprised.
    Do as much as you want of the above... not all of it is necessary.. only if you want it reliable.. or as reliable as Yosemite in its current incarnation can manage.
    The most important thing is point 6.. mount the disk using direct IP address and not names.. dns in Yosemite is fatally flawed.
    See http://arstechnica.com/apple/2015/01/why-dns-in-os-x-10-10-is-broken-and-what-yo u-can-do-to-fix-it/

  • TS1398 My ipad will not connect to other wifi networks. It has connected to my main home network but will not connect to the booster network in my home (it has previously!) It will also not connect to other networks outside my home.

    Hi
    I just got new router and had to reset my network settings on IPad. Since then, my ipad will connect onto the main home network but will not attach to my extension booster (netgear) which is linked to the home network. It will also not attach to networks outside my home that it has previously worked with. i have reset the settings again, powered off and on again, updated to the latest IOS update, but nothing is working. Please help, as I can only use wifi in a few rooms in my house and i do not have 3G on my my ipad.

    Did you try forgetting the network and starting all over again?
    Settings>WiFi>Network Name>Tap the blue arrow>Forget this Network. Restart your iPad and then try joining again.
    Try rebooting your router. Even though everything else may be connecting to your Network, it might help with the iPad. Unplug the router for about 30 seconds and then plug it in again.
    Reset Network settings on the iPad?
    Settings>>General>Reset>Reset Network Settings. You will have to start all over again, Tap WiFi in the settings, find your network and enter the password.

  • Hi.. i bought an ipad from frys store last week. but when i use it, the home button has some strange sound when i push it. if i want to exchange at apple store, it could be

    hi.. i bought an ipad from frys store last week. but when i use it, the home button has some strange sound when i push it. if i want to exchange at apple store, it could be

    Does Target accept returns from something you bought at Wal-Mart?
    Bring it back to Fry's.

  • Outlook strange behavior with error 0x800CCC13 Cannot connect to the network. Verify your network connection or modem

    Hi guys,
    I am having a strange behavior in my environment. We are running Exchange 2010 with Outlook 2007 for client access. Some of these clients needs to access some pop3 accounts from diferent vendors.
    About 2 weeks ago, we start getting error Ox800CCC13 (as described above) when users try to send email through their pop3 accounts in Outlook. This only happens to about 5 out of 100 users. I have removed the pop3 account and readded it. I was able to send
    just one email out then issue was back.
    Next, I tried sending out simple text message with no attachment. No luck. However, I noticed when I remove the signature (10 kb gif image) I was able to send out a few emails. However, issue is back with or without signature.
    For more testing, I added Mozilla Thunderbird client for the pop3 account with no exchange account and so far no error. Emails are sending out fine. I would appreciate any insight please.

    Hi, 
    This problem may occur if the Outlook 2007 client computer does not have a default gateway configured. 
    For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.To
    add this DWORD value yourself, follow these steps.
    Outlook 2007
    1.      
     Click Start, click Run, type regedit in the Open box, and then click OK.
    2.      
     Locate and then click the following subkey:
    HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\RPC
    3.      
     On the Edit menu, point to New, and then click DWORD Value.
    4.      
     Type DefConnectOpts, and then press ENTER.
    5.      
     Right-click DefConnectOpts, and then click Modify.
    6.      
     In the Value data box, type 0, and then click OK.
    7.      
     Exit Registry Editor.
    Sincerely
    Harry

  • Strange behavior of system with enabled FileVault2, Roaming profile

    Hello,
    I have encountered strange behavor of my Macbook Air after some testing.
    Macbook Air 2012 was newly installed with 10.8.4 and joined network account server on 10.8.4 server with Roaming profile (synced with server home directory). After installing some basic apps like iWork I turned on FileVault.
    Then I start to have the strange behavior - iWorks are not displaying content of document - it seams blank - just white screen without any borders where should be at least lines in numbers or empty cells.
    Another display problem is in Safari. On same pages (even default Top SItes) it`s flashing and especially when scrolling.
    Did you encountered something similar? I`m not able to get rid of it.
    Computers was used for some time before turining on FIle Vault and problem started to occur after this action. Disabling of FileVault didn`t helped (properly restarted between steps).
    I didn`t found anything strange in Console or elsewhere..

    Please read this whole message before doing anything.
    This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
    Step 1
    The purpose of this step is to determine whether the problem is localized to your user account.
    Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
    While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
    Test while logged in as Guest. Same problem?
    After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
    *Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
    Step 2
    The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, or by corruption of certain system caches.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain iMacs.  The next normal boot may also be somewhat slow.
    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem?
    After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of steps 1 and 2.

  • Macbook PRO can't find ANY Wifi network - only at home

    Hi, i have a very strange problem with my *Macbook Pro*. I have 3 apple computers at home and one pc. On all machines Wifi works fine, except my new alu Macbook Pro. Important note is, when im with my macbook on other place, office, caffe, *Wifi works fine. But when im at home, this macbook simply can't find ANY network, it's blind.* Interesting thing is, all other computers are several years old and WiFi works fine on them. My friend also bought a brand new macbook pro, and this machine also couldn't fine any network at my home, or in other case when it found networks, it couldn't connect and recieve error message "Connection timed out". I noticed there is new Wifi network in our range, is it possible that this network can cause "blindness" on new macbooks?

    *I have to say, I'm really glad you are trying to help guys.*
    Well, router is almost on default settings, SSID is brodcasted and i'm not filtering MAC adresses. I tried changed channels, diffrent types of security or no security, no luck.
    Guys, maybe i wrote it wrong, but this MacBook can't see ANY network. Around me there are 4-6 other networks which I'm able to see from other machines. So *problem is, this Macbook can't seen ANY network - not just mine.* BUT when i'm with this Macbook in office for example, or any other location, Wifi works....
    And one more important thing, this happened suddenly. I was able few months ago to find any WiFi around me with this Macbook. No changes to router, no changes to mac. Problem is somwhere in the middle...try to focus on this: why i'm not able to see any of those cca 6 networks around me. I really think it has to do something with distorted signal and Wifi card used in new macbooks. It's really sick, because all other machines works perfectly (MB 07, MBP 06, PC, iPhone 3g)
    I found a log on the router, and it's happening all the time:
    +Sunday February 28, 2010 12:52:29 Unrecognized attempt blocked from 77.49.167.124:10179 to 82.119.105.172 UDP:51413+
    +Sunday February 28, 2010 12:52:39 Unrecognized attempt blocked from 84.74.154.198:51104 to 82.119.105.172 UDP:51413+
    +Sunday February 28, 2010 12:52:41 Unrecognized attempt blocked from 85.228.116.143:30977 to 82.119.105.172 UDP:51413+
    +Sunday February 28, 2010 12:52:45 Unrecognized attempt blocked from 82.19.214.16:49713 to 82.119.105.172 UDP:51413+
    +Sunday February 28, 2010 12:52:51 Unrecognized attempt blocked from 79.5.189.206:42386 to 82.119.105.172 UDP:51413+
    +Sunday February 28, 2010 12:53:01 Unrecognized attempt blocked from 82.231.42.177:48944 to 82.119.105.172 UDP:51413+
    +Sunday February 28, 2010 12:53:03 Unrecognized attempt blocked from 150.65.37.20:35339 to 82.119.105.172 UDP:51413+
    +Sunday February 28, 2010 12:53:08 Unrecognized attempt blocked from 83.34.238.95:27314 to 82.119.105.172 TCP:38481+
    +Sunday February 28, 2010 12:53:09 Unrecognized attempt blocked from 83.34.238.95:27314 to 82.119.105.172 TCP:38481+
    +Sunday February 28, 2010 12:53:09 Unrecognized attempt blocked from 89.135.92.244:22231 to 82.119.105.172 UDP:51413+

  • Report FP_TEST_00 - Strange behavior

    Hello Gurus,
    A strange behavior with report FP_TEST_00 occurs:
    SA38 --> FP_TEST_00 --> select a device --> execute --> print preview then and error or popup is show:
    Adobe Reader
    Error initializing the font server module
    Then the SAP GUI is closed, I check the ST22 and no dump is generated and in transaction SM21 only appear:
    DP  Q0  4 Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
    DP  Q0  I Operating system call recv failed (error no. 232 )
    The #1 log entry: *
    Details Page 2 Line 28 System Log: Local Analysis of sapdev                   1
    Time     Type Nr Clt User TCode Grp N Text
    11:37:20 DP                     Q0  4 Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
    Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
    Details
    Recording at local and central time........................ 25.02.2010 11:37:20
    Task...... Process    User...... Terminal Session TCode Program Cl Problem cl         Package
    11092      Dispatcher                                           K  SAP Web AS Problem STSK
    Further details for this message type
    Module nam Line Error text..........              Caller.... Reason/cal
    dpxxdisp   1223 551  ADMIN       86  HUSVP-SAP-BA DpRTmPr    NiBufRe
    Documentation for system log message Q0 4 :
    The SAP Dispatcher (part of the application server) has lost the
    connection to a terminal process.  For example, this happens when the
    terminal program (GUI) terminates without correctly logging off the
    application server.  More detailed information about the error
    context is not available here.
    Technical details
    File Offset RecFm System log type             Grp N variable message data
       21 254340 m     Error (Function,Module,Row) Q0  4 551  ADMIN       86  HUSVP-SAP-BA     DpRTmPrNiBufRedpxxdisp1223
    The #2 Log show: *
    Details Page 2 Line 29 System Log: Local Analysis of sapdev                   1
    Time     Type Nr Clt User TCode Grp N Text
    11:37:20 DP                     Q0  I Operating system call recv failed (error no. 232 )
    Operating system call recv failed (error no. 232 )
    Details
    Recording at local and central time........................ 25.02.2010 11:37:20
    Task...... Process    User...... Terminal Session TCode Program Cl Problem cl         Package
    11092      Dispatcher                                           K  SAP Web AS Problem STSK
    Further details for this message type
    Module nam Line Error text        Caller.... Reason/cal
    nixxi.cp   4435           recv232 NiIRead    recv
    Documentation for system log message Q0 I :
    The specified operating system call was returned with an error.
    For communication calls (receive, send, etc) often the cause of errors
    are network problems.
    It could also be a configuration problem at operating system level.
    (file cannot be opened, no space in the file system etc.).
    Additional specifications for error number 232
    Name for errno number ECONNRESET
    No documentation available for error ECONNRESET
    Technical details
    File Offset RecFm System log type             Grp N variable message data
      21 254520 m     Error (Function,Module,Row) Q0  I           recv232                     NiIReadrecv   nixxi.cp4435
    Edited by: Hernando Polania Cadena on Feb 25, 2010 8:36 PM

    Hello All,
    I applied the solution in page
    http://wiki.sdn.sap.com/wiki/display/PLM/Adobe%209%20-%20SAPGUI%20crash
    Works OK
    Thanks
    Hernando

Maybe you are looking for

  • How can I extract the last 4 numbers of the SSN to be auto-populated in another text box?

    I'm creating a form for my place of business and need to figure out how to extract the last 4 numbers from a Social Security Number formatted text box into another text box that just asks for the last 4 numbers.  Can anyone help me please?

  • Burning DVD's

    Why can't iTunes burn dvd's? I have a dvd burner on my computer, which is new, and I would really much appreciate it if it could. Seeing is how I'm Canadian, I'll have to wait until late 2008 until movies, tvs shows, etc are available on the Canadian

  • All settings related to Product Costing.

    Hi, Please let me know all the settings that are to be done to perform  "*product costing*" in Controlling. Thank U.

  • Preferences changing on their own

    Preferences for applications and the sleep mode seem to be changing on their own. What am I looking for and how do I repair it? It was first noticeable in QuickBooks Pro. The company file would stop reacting to entries and then when the application w

  • Best File Manager For Really Large Folders

    I have a folder with 397GB of music. None of the music players like it much. Rhythmbox and Banshee either wont run or are so slow they're not useable. I have been using Xmms to play, which is great. Nautilus is way to slow and MC doesn't quite have t